~/products/fahadmahmood/easy_upload_files_during_checkout

pipeline liveDigest Docs

Fahadmahmood Easy Upload Files During Checkout vulnerabilities

1 known vulnerability affecting fahadmahmood/easy_upload_files_during_checkout.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2025-12682P2CRITICALCVSS 9.8≤ 2.9.82025-11-04

CVE-2025-12682 [CRITICAL] CWE-434 CVE-2025-12682: The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript fil The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server

Fahadmahmood Easy Upload Files During Checkout vulnerabilities | cvebase